Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/d5104c-f64a-44ca-a37b-6e1f2f6851cf/1/5cNA7ludrxpoGPDfQH-ll1iGsQ8.mft
File: 5cNA7ludrxpoGPDfQH-ll1iGsQ8.mft (raw, json)
Hash identifier: lv4IrDAyZxcTfuKnaw520y5R8k90DyaBNji1DfE0UAI=
Subject key identifier: 52:24:82:7B:D7:5D:53:47:D3:B5:2C:A2:71:B8:B0:FF:6C:9C:BC:C8
Authority key identifier: E5:C3:40:EE:5B:9D:AF:1A:68:18:F0:DF:40:7F:A5:97:58:86:B1:0F
Certificate issuer: /CN=e5c340ee5b9daf1a6818f0df407fa5975886b10f
Certificate serial: 019768BBFE3B2125D9D2C7DB7139E702D155
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5cNA7ludrxpoGPDfQH-ll1iGsQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/d5104c-f64a-44ca-a37b-6e1f2f6851cf/1/5cNA7ludrxpoGPDfQH-ll1iGsQ8.mft
Manifest number: 09FD
Signing time: Fri 13 Jun 2025 10:00:40 +0000
Manifest this update: Fri 13 Jun 2025 10:00:40 +0000
Manifest next update: Sat 14 Jun 2025 10:00:40 +0000
Files and hashes: 1: 0fMiJFl550osRSOwJ53RLThidmY.roa (hash: 62Jum/5Ter4OZqqvtTzk7nbCXv0FL6G77xoVhVQlYjw=)
2: 5cNA7ludrxpoGPDfQH-ll1iGsQ8.crl (hash: /RigjmXzzQXZFx1kw/r14IA8NrtbBVPs643DnvA7k5w=)
3: L9pi3nyxzTSejNrNKTLFupEkeKc.roa (hash: KRhXEXpB0ZgWCnBzMsYjo3MIerLmYQGo8A6sCf5dI54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/d5104c-f64a-44ca-a37b-6e1f2f6851cf/1/5cNA7ludrxpoGPDfQH-ll1iGsQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/d5104c-f64a-44ca-a37b-6e1f2f6851cf/1/5cNA7ludrxpoGPDfQH-ll1iGsQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/5cNA7ludrxpoGPDfQH-ll1iGsQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 10:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:bb:fe:3b:21:25:d9:d2:c7:db:71:39:e7:02:d1:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5c340ee5b9daf1a6818f0df407fa5975886b10f
Validity
Not Before: Jun 13 10:00:40 2025 GMT
Not After : Jun 14 10:00:40 2025 GMT
Subject: CN=5224827bd75d5347d3b52ca271b8b0ff6c9cbcc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:83:b6:36:62:ff:ab:5b:18:6f:27:10:0e:11:
44:6f:55:c7:eb:25:bc:dc:44:ab:a5:fc:b9:7f:c5:
34:de:ba:d7:ff:b6:96:2a:5c:4b:1b:6c:bf:8e:51:
f2:00:1f:9f:5c:b2:a8:53:a5:a5:02:06:6a:22:06:
96:69:03:2a:38:d7:22:20:be:82:a6:5d:da:00:70:
fd:d8:dd:9f:2b:1a:6a:d0:05:37:57:89:82:66:0f:
ef:7c:d7:d0:95:e2:68:57:71:7f:ce:ff:be:4f:63:
c0:d3:e4:ad:46:88:82:eb:bc:aa:61:89:d1:5d:10:
3a:35:f1:23:87:69:0c:c7:d8:0a:01:3f:1b:54:92:
3f:ab:26:7e:07:c1:01:95:d7:56:00:6f:48:1b:7d:
24:cf:ff:79:99:d1:b1:d0:a4:46:96:16:39:e1:9c:
5f:af:79:c8:fb:67:79:b2:10:64:47:20:63:3c:cc:
e6:c1:cf:ce:4f:47:63:9e:6f:a8:30:1a:79:b7:a2:
e1:28:e0:d3:99:12:28:f6:7d:dd:b5:49:d8:73:82:
4a:9b:f1:43:ae:67:e8:9b:8e:65:a2:0f:d1:8d:36:
3c:36:29:b2:9e:2c:0e:55:1f:e9:97:67:3b:fa:e8:
e4:53:79:01:5d:73:82:88:8d:ea:d6:62:f2:9e:cd:
6d:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:24:82:7B:D7:5D:53:47:D3:B5:2C:A2:71:B8:B0:FF:6C:9C:BC:C8
X509v3 Authority Key Identifier:
keyid:E5:C3:40:EE:5B:9D:AF:1A:68:18:F0:DF:40:7F:A5:97:58:86:B1:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5cNA7ludrxpoGPDfQH-ll1iGsQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/d5104c-f64a-44ca-a37b-6e1f2f6851cf/1/5cNA7ludrxpoGPDfQH-ll1iGsQ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/d5104c-f64a-44ca-a37b-6e1f2f6851cf/1/5cNA7ludrxpoGPDfQH-ll1iGsQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:90:5c:15:c8:06:4f:ff:39:10:11:2d:7f:40:e7:c4:68:43:
3c:6a:f8:83:b8:e4:af:c6:87:32:95:71:51:8d:42:e5:59:98:
d3:a7:41:5b:fd:d7:23:83:39:5a:6f:de:22:fb:ea:81:2e:07:
96:74:a2:59:8b:6b:00:2d:48:98:a1:fb:ab:24:4d:d9:08:f7:
5b:03:14:07:3a:16:76:20:f7:31:a7:91:86:fe:a8:eb:f9:8a:
81:87:aa:15:ec:18:06:66:dc:66:c4:75:f3:4c:3f:35:08:4f:
58:2b:2c:2f:62:e1:24:ec:c0:94:5b:ee:aa:23:ab:d9:9e:f8:
c4:f2:3d:9b:53:3d:00:d6:01:03:a0:94:45:e0:e8:d3:39:b8:
fd:ad:6f:68:a6:46:c3:e1:aa:71:37:38:6b:d3:59:e9:ae:50:
d0:03:71:af:f5:a0:ec:68:47:5e:e7:fe:23:02:b8:78:b0:fb:
f5:bb:3c:07:0a:40:1b:5b:75:02:6f:63:55:73:a6:34:0a:73:
8f:bd:3a:45:b1:d6:07:a4:b9:3e:66:31:b4:63:02:5a:b6:0f:
3a:57:b2:2b:cb:ca:7d:00:33:cd:4d:ae:6b:80:db:3b:16:7e:
d6:ee:18:73:3e:fe:8f:e4:eb:2c:40:cb:37:59:09:87:ad:4c:
b1:1e:33:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:24:39 2025 by rpki-client